Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: CjVOTMhFrRZ+WIohY84AQygAcsMPJB0JTvJp2zV5zn0=
Subject key identifier: 7B:6E:2E:14:64:FD:E3:B2:08:4C:28:90:C3:D0:5B:7A:DC:2A:3A:BC
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019CADC8161058C9E9084A2F05D841DEB7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 09:01:37 +0000
Manifest this update: Mon 02 Mar 2026 09:01:37 +0000
Manifest next update: Tue 03 Mar 2026 09:01:37 +0000
Files and hashes: 1: 1aorfBEtrS5GmOfmJCAhL86Ev9o.roa (hash: nVeN0o0LJkNxID8TEKJoSJ7nvDwzMLsmkaxY6SDeSaE=)
2: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: tUMmr29dLMbO0ICaU6dAGOthkVIvld61AFRVf/xGYJ8=)
3: iuImAg4mIu7cmFaP-tCFJQiPIK4.roa (hash: wW1K/UcoLMZnuH4bQB2tjq8tIUvTcVi7eaR2lcNxUuM=)
4: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (hash: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:16:10:58:c9:e9:08:4a:2f:05:d8:41:de:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Mar 2 09:01:37 2026 GMT
Not After : Mar 3 09:01:37 2026 GMT
Subject: CN=7b6e2e1464fde3b2084c2890c3d05b7adc2a3abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:09:c0:b3:e0:f1:48:41:02:46:23:fb:f3:
fd:48:92:0a:9b:19:ac:ab:07:79:8f:6f:18:56:a3:
6b:c4:f1:70:99:7b:bb:31:9f:0c:e3:19:fd:bb:d3:
37:aa:d7:73:4f:fd:0e:c1:f1:d4:c3:89:5a:54:51:
0b:6c:43:fd:b4:c1:23:a2:b3:47:77:28:83:33:42:
ff:cf:8d:b5:4b:67:2c:be:01:28:38:0b:e2:0b:d5:
59:6d:3b:bd:69:75:b9:4e:09:82:a0:5f:9b:a9:fd:
32:27:33:e0:d0:ba:ac:46:ad:4f:92:53:8a:b8:a1:
52:9c:c1:bb:71:f5:41:39:71:79:5c:74:65:f3:d3:
f7:c2:f6:74:b1:09:be:0f:de:73:51:82:89:6a:93:
ad:d9:0b:c1:8b:98:8c:a4:f0:f5:0f:5b:f8:01:a5:
25:b0:18:a1:c2:94:d5:16:ac:b3:73:40:51:0f:82:
d6:59:49:59:56:57:d6:e1:33:18:43:06:df:aa:bf:
26:9d:bd:63:db:52:37:dd:88:a2:70:c2:fd:e3:1a:
6b:4c:57:55:d0:57:34:42:76:15:39:cb:82:e5:98:
c1:31:5d:54:30:55:c3:dd:d3:e8:46:b1:44:74:05:
0f:30:55:29:62:69:d3:51:a6:0e:42:01:4b:77:1f:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:2E:14:64:FD:E3:B2:08:4C:28:90:C3:D0:5B:7A:DC:2A:3A:BC
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:c7:8d:1f:b5:b3:9c:90:12:39:0f:c9:5d:5c:c4:50:97:
54:b1:17:c2:e6:46:76:6e:5b:1b:2a:09:3a:dd:93:cc:1b:bc:
67:26:55:85:2b:ba:d7:4c:8f:a3:7b:fa:ae:c3:a4:55:f8:3e:
09:fc:44:32:09:de:35:3a:a3:42:47:80:15:41:54:b0:8b:3b:
5c:ce:75:eb:0e:e4:53:34:09:0f:46:ea:e1:51:08:a8:b3:68:
95:3d:ce:d9:e9:5f:f4:f6:33:04:53:63:af:44:fa:49:04:14:
03:00:4c:10:61:11:4d:5b:57:c5:06:d1:66:53:96:96:55:e4:
9a:fc:29:db:5b:f7:2a:f3:dc:70:a6:47:55:b3:d0:2b:57:87:
5a:e1:89:4b:48:99:7d:32:89:8f:c3:12:68:cd:72:2c:55:99:
17:36:7d:78:2c:4b:19:26:1f:32:d3:1c:63:13:11:db:f0:51:
3e:1e:2d:9a:db:17:e3:9e:7e:6e:fa:a2:4e:98:1c:34:69:e8:
7b:0f:a8:ba:3f:9e:f6:d1:e6:84:b0:b6:23:c8:34:e4:a1:fe:
1a:4c:d2:cc:58:37:8d:30:23:a7:d9:2b:1e:ef:77:b9:72:88:
61:79:e5:0a:6f:b7:ee:ef:1a:79:fa:d3:c2:01:4f:f1:d8:f2:
e1:14:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:45 2026 by rpki-client